Search MilitaryCAC:

Site Map

Make a Donation button image

MilitaryCAC.com logo

.com | .us | .ml  | .mobi | .net | .org


The Definitive Source for Everything CAC

Common Access Card help for your
P
ersonal Computer
Be notified of
page updates

It's private

Powered by:
ChangeDetection

Amazon logo

 

Find out how you can support MilitaryCAC when you shop on Amazon

 

 

     

 

APPLE MAC CAC ENABLER (aka MIDDLEWARE) PAGE

 

CAC Enabling Programs

 

NOTES:

Between mid October 2019 and mid February 2020 everyone in the Army was migrated to use their PIV Authentication certificate for Email access.  You no longer use the Email certificate for Enterprise Email.

 

Mac users who choose to upgrade (or already have upgraded) to Mac OS Catalina (10.15.x) will need to uninstall all 3rd Party CAC enablers per https://militarycac.com/macuninstall.htm  AND reenable the built in smart card ability (very bottom of macuninstall link above)

 

If you purchased your Mac with OS Catalina (10.15.x) already installed, you can skip the uninstall part above and follow the instructions below.

 

Signing of PDFs should work in Mac OS Catalina (10.15.x) by adjusting these settings.

 

New imageAll Mac users can now verify if their CAC is blocked by using the Apple authorized Smart Card Utility app https://apps.apple.com/us/app/smart-card-utility/id1444710309?mt=12   ONLY works for Mac OS 10.14 and later using 64-bit processorNew image

 

 

Follow Tables 1 through 4 below:

 

PLEASE READ the preliminary Information before you start:

 

Preliminary Information 1: Restart your computer after installing the CAC enabler before trying to access the CAC enabled site

 

Preliminary Information 2:  Installing multiple enabling programs will cause your system to NOT work.  Here's how to uninstall CAC enablers.

 

Preliminary Information 3:  The CACkey CAC enabler will ask for a "keychain password" (like the image below). You need to enter your CAC PIN.  Make sure if it asks for your Keychain password after you select your CAC certificate, that you use your CAC [6-8 digit / all number] PIN.

Keychain password box

 

If you block your CAC, you'll have to visit an ID card office to get it unblocked.  PKard has the capability to show you when your CAC is blocked.  Mac OS 10.15.x and 10.14.x can download this app to verify if their card is blocked: https://apps.apple.com/us/app/smart-card-utility/id1444710309?mt=12

 

Table 1:  See which CAC enabling program will work with your version of Mac OS

 

 Once you've decided, go to Table 2

Compatible with: CAC
Key
PKard Mac OS Catalina
Built In
Mac
OS Mojave
Built In
Mac OS High Sierra
Built
In
Mac OS Sierra
Built
In
Open
SC
Key
chain-
PKCS11
Smart Card Service Activ
Client for Mac
Trusted End
Node Security (TENS)
Catalina
(10.15.x)
Red X Red X Red XGreen checkmark
Note6
N/A N/A N/A Red X
Question mark Red X Green checkmark
Note7
Green checkmark
Mojave (10.14.x) Green checkmark
Note3
Green checkmark
Note3
N/A Green checkmark
Note3
N/A N/A Question mark Question mark Red X Green checkmark Green checkmark
High Sierra (10.13.x) Green checkmark
Note3
Note5
Green checkmark
Note3
Note5
N/A N/A
Green checkmark
Note3
N/A Green checkmark
Note4
Question mark Red X Green checkmark Green checkmark
Sierra (10.12.x) Green checkmark
Note3
Note5
Green checkmark
Note2
Note5
N/A N/A N/A Green checkmark
Note3
Question mark Question mark Green checkmark Green checkmark Green checkmark
El Capitan (10.11.x) Green checkmark Green checkmark N/A N/A N/A N/A Question mark N/A Green checkmark Green checkmark Green checkmark
Yosemite (10.10.x) Green checkmark Green checkmark N/A N/A N/A N/A Question mark N/A Green checkmark Green checkmark Green checkmark
Mavericks (10.9.x) Green checkmark Green checkmark N/A N/A N/A N/A Question mark N/A Green checkmark Green checkmark Green checkmark
Mountain Lion (10.8.x) Green checkmark Green checkmark N/A N/A N/A N/A Question mark N/A Green checkmark Green checkmark Green checkmark
Lion (10.7.x) Green checkmark Green checkmark N/A N/A N/A N/A Question mark N/A Green checkmark Red X Green checkmark
Snow Leopard (10.6.x) Green checkmark Green checkmark N/A N/A N/A N/A Question mark N/A Green checkmark Red X Green checkmark
Leopard (10.5.x) Green checkmark Green checkmark N/A N/A N/A N/A Question mark N/A Red X Red X
Green checkmark
Note1
Note1: Computer must have an Intel processor, will not work with a PPC processor

Note2: Need version 1.7 (or above)

Note3: Apple computers with Mac OS Catalina, Mojave, High Sierra, and Sierra have a "built in Smart Card ability," meaning 3rd party CAC enablers are no longer needed.

Note4: One person has informed me this works for him, but NOT when using Safari.  Only using Chrome.

Note5: With Mac OS Sierra and High Sierra, you must use Google Chrome.  Safari is not "CAC compatible."  You may also update your computer to Mojave (or newer), then use Safari again.

Note6: Mac OS Catalina will not work with 3rd party CAC enablers installed.  Please Read this article on Thursby's website about this.  INFORMATION: There was an issue with 10.15.4.  If this is the version you, please update to 10.15.5 or 10.16.6

Note7: I have a few reports that this enabler works with Mac OS Catalina

  

 

Table 2:  Verify the CAC enabling program you selected above will work with your specific CAC.

Click here if you are unsure which CAC you have

 

Once you've decided, go to Table 3

Compatible with: CAC
Key
PKard Mac OS Catalina Built In Mac OS Mojave Built In Mac OS High Sierra Built In Mac OS Sierra Built In Open
SC
Key
chain-
PKCS11
Smart Card Services Activ
Client for Mac
Trusted End
Node Security (TENS)
GEMALTO TOP DL GX 4 144 Green checkmark Green checkmark Question mark
Note1
Question mark
Note1
Question mark
Note1
Question mark
Note1
Question mark
Note1
Question mark
Note1
Green checkmark Green checkmark Green checkmark
GEMALTO DL GX4-A 144 Green checkmark Green checkmark Green checkmark  Green checkmark Green checkmark Green checkmark Question mark
Note1
Question mark
Note1
Green checkmark
Green checkmark Green checkmark
Oberthur ID One 128 v5.5 Dual Green checkmark Green checkmark Question mark
Note1
Question mark
Note1
Green checkmark Question mark
Note1
Question mark
Note1
Question mark
Note1
Green checkmark
Green checkmark Green checkmark
Oberthur ID One 128 v5.5a D Green checkmark Green checkmark Green checkmark Green checkmark Green checkmark Green checkmark Question mark
Note1
Question mark
Note1
Red X Green checkmark Green checkmark
G+D FIPS 201 SCE 3.2 Green checkmark Green checkmark Green checkmark Green checkmark Green checkmark Question mark
Note1
Question mark
Note1
Question mark
Note1
Green checkmark Green checkmark Question mark
Note1
G+D FIPS 201 SCE 7.0 Green checkmark Green checkmark Green checkmark Green checkmark Green checkmark Question mark
Note1
Question mark
Note1
Question mark
Note1
Question mark
Note1
Question mark
Note1
Question mark
Note1

Note1: I haven't heard of anyone with this CAC and specific enabler.  If you have one and have successfully used your CAC with the question marked enabler above, please contact me

 

 

Table 3:  Verify the CAC enabling program you selected in tables 1 & 2 is:

a. Compatible with Firefox (if you plan to use this web browser),

b. Will read your PIV Authentication certificate,

c. Will allow you to digitally sign PDFs,

d. Can show you when your CAC is blocked,

e. You want support from the vendor, or

f. You want it for free, or pay for it

  

Once you've decided, go to Table 4

and click the link to the CAC enabler you decided to use.

Compatible with: CACKey PKard Mac OS Catalina Built In Mac OS Mojave Built In Mac OS High Sierra Built In  Mac OS Sierra Built In Open
SC
Key
chain-
PKCS11
Smart Card Services Activ
Client for Mac
Trusted End Node Security (TENS)
Firefox web browser Green checkmark Red X Red X  Red X Red X Red X Green checkmark Question mark Red X Green checkmark Green checkmark
Reads PIV Authentication
certificate
Green checkmark
Note1
Green checkmark Green checkmark Green checkmark Green checkmark
Note1
Green checkmark
Note1
Green checkmark Question mark Question mark Green checkmark
Note1
Question mark
Will allow you to digitally sign PDFs Green checkmark Green checkmark Green checkmark
Note2
Green checkmark
Note2
Green checkmark
Note2
Green checkmark
Note2
Green checkmark Question mark Red X Red X Question mark
Can show when CAC is blocked Red X Green checkmark Red X
Note3
Red X
Note3
Red X Red X Red X Question mark Red X Red X Red X
Vendor provides support Red X Green checkmark
help
Red X Red X Red X Red X Red X Red X Red X Green checkmark
help
Red X
Costs Money Crossed Out $ sign dollar sign image Crossed Out $ sign Crossed Out $ sign Crossed Out $ sign Crossed Out $ sign Crossed Out $ sign Crossed Out $ sign Crossed Out $ sign dollar sign image Crossed Out $ sign

Note1:  PIV cert has to already be exposed

Note2:  Signing of PDFs on Mac OS Catalina (10.15.x), Mojave (10.14.x), High Sierra (10.13.x), & Sierra (10.12.x) can be corrected by following these settings.  Some others have installed OpenSC and claim it works.

Note3:  You can see if your CAC is blocked by downloading this app (https://apps.apple.com/us/app/smart-card-utility/id1444710309?mt=12) Mac OS native does not have this capability built in.

 

 

 

Table 4:  Click link below for the CAC enabler you decided to use based on the criteria in tables 1-3 above

 

 

DO NOT INSTALL a CAC Enabler in Catalina (10.15.x), Mojave (10.14.x), High Sierra (10.13.x), or Sierra (10.12.x) as they all have a built in Smart Card ability.

 

CAC Enabler
CACKey
PKard from Thursby
OpenSC You must remove all 3rd party enablers prior to installing
Keychain-PKCS11
Smart Card Services
ActivClient for Mac sold only by: SCB Solutions
Trusted End Node Security (TENS) formerly LPS

 

Navy users:

If you still have problems, here is a helpful Navy specific page

 

Specifics for the following versions of Mac OS can be found at these links:

 

Catalina Mac OS Catalina -Tiny  (10.15.x)
Mojave Mac OS Mojave tiny image  (10.14.x)
High Sierra High Sierra (10.13.x)
Sierra Mac OS Sierra (10.12.x)
El Capitan el Capitan (10.11.x)
Yosemite Yosemite image (10.10.x)
Mavericks Mavericks logo (10.9.x)
Mountain Lion Apple Mountain Lion logo (10.8.x)
Lion Apple Lion logo (10.7.x)
Snow Leopard Apple Snow Leopard logo (10.6.x)
Leopard Apple Leopard logo (10.5.x)

 

 

The six (6) current CAC Types are...

Look at the back of your ID card (above the black strip) for one of the examples below.  If you have any other version, you need to visit an ID card office and have it replaced.  All CACs other than these shown below were to be replaced prior to 1 October 2012.

 

A guide to help figure out which CAC you have

 

Gemalto 144 CAC image GemaltoDLGX4-A 144 image Oberthur 5.5 CAC image Oberthur 5.5a CAC G&D FIPS 201 SCE 3.2 Stop Gap CAC image

Find out how to flip card over video

 

 

PKard for Mac

Information / download links

 

Supports Mac OS High Sierra (10.13.x) and Mojave (10.14.x)  NOT Catalina (10.15.x)

 

Purchase PKard from Thursby Software

 

PKard demo (click Videos tab)

 

Thursby offers US phone, email, and forums support for the software they've been developing for over 10 years and is 100% made in the USA

 

 

 

If you have Centrify Express installed, you can see / verify if your CAC is blocked.

 

Select Go > Utilities > Centrify

Double click:  Smart Card Assistant

Look under status for:  Card is locked

NOTE: If Card status is blank, the card is not blocked

 

CAC Blocked message with Centrify

 

 

If you are still having problems, contact us.

If you have questions or suggestions for this site, contact Michael J. Danberry

Are you interested in subscribing to the CACNews email lists?

Disclaimer

 

ACRONYM Reference Page

 

GoDaddy Site Certified seal

 

Last Update or Review:  Saturday, 08 August 2020 21:09

 

The following domain names all resolve to the same website:  ChiefsCACSite.com, CommonAccessCard.us, CommonAccessCard.info, & ChiefGeek.us